| Author | Messages | |
AD000001365
Posts:0
 | | 08/26/2005 2:25 AM |
| If I set a group to managed by to a particular user and check the box
Manger can update member list.
That means the Manager can add or delete users correct?
Does he need ADUC or is there another way he can add those users?
Thanks
Jeff
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| listmail
Posts:497
| | 08/27/2005 7:00 AM |
| It means the manager can add or remove DNs to the member attribute of the
group. So they will be able to add or remove members of the group. They
won't actually be able to add/remove users from AD with just those rights.
ADUC can be used, as can a script or anything else that modifies the member
attribute of the group in question.
joe
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Cothern Jeff D.
Team EITC
Sent: Friday, August 26, 2005 10:24 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] Permissions for a user to add users to a group
If I set a group to managed by to a particular user and check the box Manger
can update member list.
That means the Manager can add or delete users correct?
Does he need ADUC or is there another way he can add those users?
Thanks
Jeff
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| AD00000264
Posts:0
| | 08/29/2005 3:57 AM |
| A taskpad is one way to do it. Another way is to tell the manager to
find the group using the Search function on the start menu - when they
double-click the group, the membership list is displayed and buttons are
provided to add and remove members. The buttons are only active if they
have the permissions to do so, as mentioned below. No additional
software install/config required.
Dave
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Cothern Jeff D.
Team EITC
Sent: Monday, August 29, 2005 7:45 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Permissions for a user to add users to a group
Ok that is what I figured. SO if I install just aduc from the adminpak
and create a custom task pad for the manager. It would be the easier
and best method to alliviate confusion etc?
Jeff
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of joe
Sent: Saturday, August 27, 2005 2:59 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Permissions for a user to add users to a group
It means the manager can add or remove DNs to the member attribute of
the group. So they will be able to add or remove members of the group.
They won't actually be able to add/remove users from AD with just those
rights.
ADUC can be used, as can a script or anything else that modifies the
member attribute of the group in question.
joe
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Cothern Jeff D.
Team EITC
Sent: Friday, August 26, 2005 10:24 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] Permissions for a user to add users to a group
If I set a group to managed by to a particular user and check the box
Manger can update member list.
That means the Manager can add or delete users correct?
Does he need ADUC or is there another way he can add those users?
Thanks
Jeff
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| AD000001365
Posts:0
| | 08/29/2005 12:46 PM |
| Ok that is what I figured. SO if I install just aduc from the adminpak
and create a custom task pad for the manager. It would be the easier
and best method to alliviate confusion etc?
Jeff
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of joe
Sent: Saturday, August 27, 2005 2:59 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Permissions for a user to add users to a group
It means the manager can add or remove DNs to the member attribute of
the group. So they will be able to add or remove members of the group.
They won't actually be able to add/remove users from AD with just those
rights.
ADUC can be used, as can a script or anything else that modifies the
member attribute of the group in question.
joe
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Cothern Jeff D.
Team EITC
Sent: Friday, August 26, 2005 10:24 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] Permissions for a user to add users to a group
If I set a group to managed by to a particular user and check the box
Manger can update member list.
That means the Manager can add or delete users correct?
Does he need ADUC or is there another way he can add those users?
Thanks
Jeff
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| AD00000264
Posts:0
| | 08/31/2005 4:48 AM |
| Sorry. should have been more specific. If you do a search for 'people',
but type a group name in there, it'll find it. Not very intuitive, I
know, but it works. If you type a partial group name you'll get all the
groups that start with that string. This can be handy if your group
naming convention uses prefixes that mean something to you....
I know this works fine on Win2K and XP Pro, but the search dialog is a
bit different between the two if you're not using the 'classic;
interface on XP.
Dave
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Cothern Jeff D.
Team EITC
Sent: Wednesday, August 31, 2005 6:32 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Permissions for a user to add users to a group
Ok looking thru the search function I cannot find any specific thing to
look for groups. I see the find people but that is looking for contact
information not a particular group. Perhaps I am missing something.
Jeff
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Fugleberg,
David A
Sent: Monday, August 29, 2005 11:50 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Permissions for a user to add users to a group
A taskpad is one way to do it. Another way is to tell the manager to
find the group using the Search function on the start menu - when they
double-click the group, the membership list is displayed and buttons are
provided to add and remove members. The buttons are only active if they
have the permissions to do so, as mentioned below. No additional
software install/config required.
Dave
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Cothern Jeff D.
Team EITC
Sent: Monday, August 29, 2005 7:45 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Permissions for a user to add users to a group
Ok that is what I figured. SO if I install just aduc from the adminpak
and create a custom task pad for the manager. It would be the easier
and best method to alliviate confusion etc?
Jeff
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of joe
Sent: Saturday, August 27, 2005 2:59 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Permissions for a user to add users to a group
It means the manager can add or remove DNs to the member attribute of
the group. So they will be able to add or remove members of the group.
They won't actually be able to add/remove users from AD with just those
rights.
ADUC can be used, as can a script or anything else that modifies the
member attribute of the group in question.
joe
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Cothern Jeff D.
Team EITC
Sent: Friday, August 26, 2005 10:24 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] Permissions for a user to add users to a group
If I set a group to managed by to a particular user and check the box
Manger can update member list.
That means the Manager can add or delete users correct?
Does he need ADUC or is there another way he can add those users?
Thanks
Jeff
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| AD000001365
Posts:0
| | 08/31/2005 11:30 AM |
| Does that work in windows 2000?
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Fugleberg,
David A
Sent: Monday, August 29, 2005 11:50 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Permissions for a user to add users to a group
A taskpad is one way to do it. Another way is to tell the manager to
find the group using the Search function on the start menu - when they
double-click the group, the membership list is displayed and buttons are
provided to add and remove members. The buttons are only active if they
have the permissions to do so, as mentioned below. No additional
software install/config required.
Dave
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Cothern Jeff D.
Team EITC
Sent: Monday, August 29, 2005 7:45 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Permissions for a user to add users to a group
Ok that is what I figured. SO if I install just aduc from the adminpak
and create a custom task pad for the manager. It would be the easier
and best method to alliviate confusion etc?
Jeff
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of joe
Sent: Saturday, August 27, 2005 2:59 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Permissions for a user to add users to a group
It means the manager can add or remove DNs to the member attribute of
the group. So they will be able to add or remove members of the group.
They won't actually be able to add/remove users from AD with just those
rights.
ADUC can be used, as can a script or anything else that modifies the
member attribute of the group in question.
joe
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Cothern Jeff D.
Team EITC
Sent: Friday, August 26, 2005 10:24 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] Permissions for a user to add users to a group
If I set a group to managed by to a particular user and check the box
Manger can update member list.
That means the Manager can add or delete users correct?
Does he need ADUC or is there another way he can add those users?
Thanks
Jeff
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| AD000001365
Posts:0
| | 08/31/2005 11:33 AM |
| Ok looking thru the search function I cannot find any specific thing to
look for groups. I see the find people but that is looking for contact
information not a particular group. Perhaps I am missing something.
Jeff
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Fugleberg,
David A
Sent: Monday, August 29, 2005 11:50 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Permissions for a user to add users to a group
A taskpad is one way to do it. Another way is to tell the manager to
find the group using the Search function on the start menu - when they
double-click the group, the membership list is displayed and buttons are
provided to add and remove members. The buttons are only active if they
have the permissions to do so, as mentioned below. No additional
software install/config required.
Dave
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Cothern Jeff D.
Team EITC
Sent: Monday, August 29, 2005 7:45 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Permissions for a user to add users to a group
Ok that is what I figured. SO if I install just aduc from the adminpak
and create a custom task pad for the manager. It would be the easier
and best method to alliviate confusion etc?
Jeff
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of joe
Sent: Saturday, August 27, 2005 2:59 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Permissions for a user to add users to a group
It means the manager can add or remove DNs to the member attribute of
the group. So they will be able to add or remove members of the group.
They won't actually be able to add/remove users from AD with just those
rights.
ADUC can be used, as can a script or anything else that modifies the
member attribute of the group in question.
joe
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Cothern Jeff D.
Team EITC
Sent: Friday, August 26, 2005 10:24 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] Permissions for a user to add users to a group
If I set a group to managed by to a particular user and check the box
Manger can update member list.
That means the Manager can add or delete users correct?
Does he need ADUC or is there another way he can add those users?
Thanks
Jeff
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
|
|